if $programname contains "cgr-engine" or $programname contains "CGRateS" then /var/log/cgrates/CGRateS.log
& stop